Page MenuHomeVyOS Platform

Add support for op-mode PKI direct install into an active config session
Closed, ResolvedPublicFEATURE REQUEST

Description

This PR adds support for generated PKI objects to be directly installed into an active config session.

From op-mode:

vyos@vyos:~$ generate pki ca install test
Enter private key type: [rsa, dsa, ec] (Default: rsa) ec
...
You are not in configure mode, commands to install manually from configure mode:
set pki ca test certificate '...'
set pki ca test private key '...'

From conf mode:

vyos@vyos:~$ conf
WARNING: You are currently configuring a live-ISO environment, changes will not persist until installed
[edit]
vyos@vyos# run generate pki ca install test
Enter private key type: [rsa, dsa, ec] (Default: rsa) ec
...
2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply.
[edit]
vyos@vyos# comp
+pki {
+    ca test {
+        certificate ...
+        private {
+            key ...
+        }
+    }
+}

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Improvement (missing useful functionality)